Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/OzOFiGONbg0HxGMmcXP4gedrxiI.roa
File: OzOFiGONbg0HxGMmcXP4gedrxiI.roa (raw, json)
Hash identifier: RskjwC6HRiWKkTSE63DQu2INJzba+KhH1QiEErn93mY=
Subject key identifier: 3B:33:85:88:63:8D:6E:0D:07:C4:63:26:71:73:F8:81:E7:6B:C6:22
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019F3C2D382956E549DD1D5B9B03B4B7D68D
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/OzOFiGONbg0HxGMmcXP4gedrxiI.roa
Signing time: Tue 07 Jul 2026 10:43:44 +0000
ROA not before: Tue 07 Jul 2026 10:43:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 27411
IP address blocks: 45.137.87.0/24 maxlen: 24
45.152.197.0/24 maxlen: 24
2a0c:7886:b4::/48 maxlen: 48
2a0f:1203::/32 maxlen: 32
2a0f:3043::/32 maxlen: 32
2a10:67c7::/32 maxlen: 32
2a10:68c6::/32 maxlen: 32
2a13:9280::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 Jul 2026 08:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3c:2d:38:29:56:e5:49:dd:1d:5b:9b:03:b4:b7:d6:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jul 7 10:43:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3b338588638d6e0d07c463267173f881e76bc622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:82:93:05:83:3d:df:62:0a:7f:b1:17:8a:31:
72:ed:5c:d1:c6:ad:b8:a3:54:3c:21:18:12:de:27:
ad:a3:f1:64:87:48:e4:1f:5b:cf:48:1e:67:1d:89:
78:9a:21:45:dd:49:63:12:4a:77:60:3b:50:07:81:
8e:14:cf:ed:40:b8:e9:cf:3b:18:14:ad:90:90:64:
a1:c3:99:a5:f5:2d:9f:ca:99:8c:25:3d:b6:df:48:
17:34:e2:8f:e9:00:cb:4c:a1:91:56:f4:00:43:3d:
64:6e:57:8d:ec:f1:ac:b9:e1:0d:c8:0e:5d:81:e6:
68:17:29:42:cd:b0:48:a5:1e:d7:c8:23:f4:4d:17:
03:fc:7b:02:44:94:e4:b2:69:43:0b:3b:13:f3:51:
4c:91:23:db:35:ea:02:54:b8:a2:12:2b:f6:13:3d:
ba:e8:af:f8:60:d5:11:4c:cd:b6:8b:1d:2c:71:48:
b7:3b:e8:11:b6:d7:36:fe:78:7c:38:11:b1:b2:3a:
51:5a:f2:29:d2:0a:be:41:55:30:d4:62:b3:6f:de:
1a:84:e5:76:19:cf:cb:1f:3b:1e:8c:44:29:37:9c:
16:8f:4b:61:95:03:68:7e:a5:ca:a7:10:30:09:26:
c9:23:30:ea:f8:4a:c7:de:48:59:7b:ff:f7:65:99:
6d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:33:85:88:63:8D:6E:0D:07:C4:63:26:71:73:F8:81:E7:6B:C6:22
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/OzOFiGONbg0HxGMmcXP4gedrxiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.87.0/24
45.152.197.0/24
IPv6:
2a0c:7886:b4::/48
2a0f:1203::/32
2a0f:3043::/32
2a10:67c7::/32
2a10:68c6::/32
2a13:9280::/32
Signature Algorithm: sha256WithRSAEncryption
ac:fc:e5:e5:10:13:76:b4:f5:dd:d7:1f:e3:84:85:33:41:f6:
a5:12:d5:c0:da:61:a8:0e:d1:07:e3:e0:71:e2:b5:18:a0:ca:
89:66:12:a2:b8:79:2b:1d:60:4d:7b:21:39:a7:0b:f7:e4:60:
f5:a0:70:a7:02:f5:25:55:72:b6:7e:57:0d:2d:f4:2b:f6:c4:
30:28:44:39:9a:b5:6f:e0:55:cc:56:64:d7:4f:7a:52:bc:1e:
04:f3:c6:ff:16:fe:94:ae:5d:25:be:85:82:66:b5:b7:28:9b:
6c:35:1f:65:d7:4c:ce:a2:a6:5a:fb:94:e1:9e:19:70:58:2e:
43:62:4d:2d:3e:f2:ea:c0:1c:65:33:4d:40:97:0a:6b:65:8c:
4f:f0:22:f9:20:d8:b5:87:33:74:ed:44:b9:8f:7e:d9:4c:74:
c4:a6:7c:d9:8f:5c:61:ef:6b:e6:5a:22:c8:11:b1:3b:e6:34:
de:5b:0f:85:0f:65:d9:ba:bd:fc:04:94:37:c3:69:8c:63:b1:
15:68:69:6d:d4:39:fe:fe:c5:a9:67:8b:04:6c:bb:f6:61:2d:
59:b3:6b:9f:8e:d9:da:fa:02:b9:eb:f5:3e:22:03:ae:57:63:
66:8f:8a:fe:09:bc:68:26:74:c2:29:f2:f1:54:95:e9:df:d5:
22:c6:39:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 12:48:10 2026 by rpki-client